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Period for Reply 

A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 



- Extensions of time may be available under the provisions of 37 CFR 1 .136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- tf the period for reply specified above is less than thirty (30) days, a reply within the statutory minimum of thirty (30) days will be considered timely. 

- tf NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1 )□ Responsive to communication(s) filed on 15 May 2001 . 
2a)D This action is FINAL. 2b)K This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 11, 453 O.G. 213. 

Disposition of Claims 

4) S Claim(s) 1-27 is/are pending in the application. 

4a) Of the above daim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) [x] Claim(s) 1-27 is/are rejected. 

7) D Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10) 13 The drawing(s) filed on is/are: a)D accepted or b)M objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1.85(a). 
Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 

11) D The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 119 

12) D Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 119(a)-(d) or (f). 
a)D All b)D Some * c)D None of: 

1 .□ Certified copies of the priority documents have been received. 

2. Q Certified copies of the priority documents have been received in Application No. . 

3. D Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 



Attachment(s) 

1 ) 13 Notice of References Cited (PTO-892) 

2) O Notice of Draftsperson's Patent Drawing Review (PTO-948) 

3) O Information Disclosure Statement(s) (PTO-1449 or PTO/SB/08) 

Paper No(s)/Mail Date . 
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5) CH Notice of Informal Patent Application (PTO-152) 
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DETAILED ACTION 

1. Claims 1-27 are pending 

Drawing Objections 

2. New corrected drawings in compliance with 37 CFR 1. 121(d) are required in this 
application because of the handwriting informality of the drawings. Labels are currently 
handwritten and are difficult to read, though legible. For the clarity of the record and 
potential future publication, formal drawings are requested. Applicant is advised to 
employ the services of a competent patent draftsperson outside the Office, as the U.S. 
Patent and Trademark Office no longer prepares new drawings. The corrected drawings 
are required in reply to the Office action to avoid abandonment of the application. The 
requirement for corrected drawings will not be held in abeyance. 

Claim Rejections - 35 USC § 102 

3. The following is a quotation of the appropriate paragraphs of 35 U.S. C. 102 that 
form the basis for the rejections under this section made in this Office action: 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public 
use or on sale in this country, more than one year prior to the date of application for patent in the United 
States. 

4. Claims 1, 3-10, 12- 19, 21-27 are rejected under 35 U.S.C. 102(b) as being 
anticipated by Dyson, US patent 5,050,212. 
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In reference to claim 1 : 

Dyson (Column 4, lines 10-25) discloses a computer program product comprising a 
computer program operable to control a computer to detect a malicious alteration to a 
stored computer file, said computer program comprising: 

• File comparing logic operable to compare said stored computer file with an 
archive copy of said computer file stored when said stored computer file was 
created(Figure 2, step 4) & (Column 5, lines 5-8) & (Column 4, lines 10-25) 

• Comparison response logic operable if said file comparing logic detects that said 
stored computer file and said archive computer file do not match to trigger further 
countermeasures against a potential malicious alteration. (Column 4, lines 10-25) 

In reference to claim 3: 

Dyson (Figure 2, steps 3 and 4) & (Column 3, lines 57-62) discloses a computer program 
product as claimed in claim 1 , wherein said archive copy of said computer file is stored in 
one of: 

• An unencrypted form; 

• An encrypted form; 

• An encrypted media 

• An encrypted volume 

• A PGP disk. 



Where the archive copy is stored in both an unencrypted form, with an encrypted portion. 
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In reference to claim 4: 

Dyson (Column 2, lines 40-45) discloses a computer program product as claimed in claim 
1 5 wherein said archive copy of said computer file is stored in one of: 

• A, different physical storage device to said stored computer file 

• A different part of a common physical storage device shared with stored computer 
file. (Column 4, line 67 - Column 5, line 5) 

Where the computer program product is stored in a different physical storage location. 

In reference to claim 5: 

Dyson (Column 4, lines 10-25) & (Column 2, line 57 - Column 3, line 10) discloses a 
computer program product as claimed in claim 1 , wherein a subset of file types stored by 
said computer are subject comparison by said file comparing logic and to creation of an 
archive copy for use with said file comparing logic, where Dyson discloses that the 
preferred embodiment examines boot file executables, and that the integrity check or file 
comparing logic is used on these subset of files. 

In reference to claim 6: 

Dyson (Column 2, line 57 - Column 3, line 10) discloses a computer program product as 
claimed in claim 5, wherein said subset of file types include one or more of: 

• Executable file types (Column 2, line 62) 

• Dynamic link library file types. (Column 3, lines 4-6) 



In reference to claim 7: 
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Dyson (Figure 2, steps 3 and 4) discloses a computer program product as claimed in 
claim 1 , comprising archive file copy logic operable upon creation of said stored 
computer file to also created said archive copy of said computer file, where the header 
and the logic hash to be compared is created and stored with the local computer file and 
the archived one. (Column 4, lines 5-10) 

Claim 8 is substantially similar to claim 5 and is rejected for the same reasons. 
Claim 9 is substantially similar to claim 6 and is rejected for the same reasons- 
Claims 10, 12-18 are a branch of claims substantially similar to'claims 1, 3-9, 
respectively, and are rejected for the same reasons. 

Claims 19, 21-27 are a branch of claims substantially similar to claims 1, 3-9, 
respectively, and are rejected for the same reasons. 

Claim Rejections - 35 USC §103 
5. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 

obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. ■ 
Patentability shall not be negatived by the manner in which the invention was made. 
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6. Claims 2, 1 1, 20 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Dyson. 

In reference to claim 2: 

Dyson fails to disclose a computer program product as claimed in claim 1, wherein said 
further countermeasures include scanning said stored computer file using a library of 
computer virus definition data to identify a computer virus infection of said stored 
computer file. 

Dyson however, does teach that viruses are often the element that causes malicious 
changes to the files. (Column 1, lines 17-21) 

The Examiner takes official notice that virus scanning modules were well known in the 
art at the time of invention. Such Examples included, Norton Antivirus ™ and McAfee 
Antivirus Software ™. Programs such as Norton Antivirus use a library of computer 
virus definition data in order to identify which virus, if any, your file is infected with. 
Virus definition files must be updated every so often, as new viruses are always being 
developed. 

It would have been obvious to one of ordinary skill in the art at the time of invention to 
apply antivirus software in order to clear files of viruses, given the knowledge that 
viruses are often the cause of malicious changes to files. 
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Conclusion 



The following art not relied upon is made of record. 



• Mann, US patent 5349655 discloses a method of allowing a file to be recovered 
even though it has been infected with a virus. 

• Carpenter et al., US patent 5287504 discloses a method of monitoring a file for 
any changes. 

8. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Thomas M Ho whose telephone number is (703)305- 
8029. The examiner can normally be reached on M-F from 8:30am - 5:00pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gregory A. Morse can be reached at (703)308-4789. The fax phone numbers 
for the organization where this application or proceeding is assigned are (703)746-7239 
for regular communications and (703)746-7238 for After Final communications. 

Any inquiry of a general nature or relating to the status of this application or 
proceeding should be directed to the receptionist whose telephone number is (703)306- 



5484. 



TMH 




December 3 ra ' 2004 



